CVE-2024-34614

Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code...

CVE-2024-34613

Improper access control in Galaxy Watch prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive information of Galaxy watch...

CVE-2024-34612

Out-of-bound write in libcodec2secmp4vdec.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code...

CVE-2024-34612

Out-of-bound write in libcodec2secmp4vdec.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code...

CVE-2024-34612

CVE-2024-34612 affects libcodec2secmp4vdec.so with an out-of-bounds write prior to SMR Aug-2024 Release 1, enabling local arbitrary code execution. Affected: libcodec2secmp4vdec.so (versions before SMR Aug-2024 Release 1). Root cause: out-of-bounds write in the codec component. Impact: local atta...

CVE-2024-34611

Improper access control in KnoxService prior to SMR Aug-2024 Release 1 allows local attackers to get sensitive information...

CVE-2024-34610

Improper access control in ExtControlDeviceService prior to SMR Aug-2024 Release 1 allows local attackers to access protected data...

CVE-2024-34610

Improper access control in ExtControlDeviceService prior to SMR Aug-2024 Release 1 allows local attackers to access protected data...

CVE-2024-34609

Improper access control in VoiceNoteService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background...

CVE-2024-34609

The CVE-2024-34609 entry refers to an improper access control issue in VoiceNoteService on Samsung mobile devices, allowing local attackers to bypass restrictions on starting services from the background. Red Hat and CVE catalogs corroborate the same description, tying the vulnerability to VoiceN...

CVE-2024-34608

The CVE-2024-34608 issue is an improper access control in PaymentManagerService prior to the SMR Aug-2024 Release 1, enabling local attackers to bypass restrictions on starting background services. Publicly noted in multiple sources, the vulnerability affects PaymentManagerService versions earlie...

CVE-2024-34608

Improper access control in PaymentManagerService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background...

CVE-2024-34606

CVE-2024-34606 applies to Samsung Mobile devices and affects the SmartThingsService prior to SMR Aug-2024 Release 1. The vulnerability is an improper access control that allows local attackers to bypass restrictions on starting services from the background. Root cause and impact are described as ...

CVE-2024-34605

Improper access control in SamsungHealthService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background...

CVE-2024-34617: Incorrect Default Permissions

Improper handling of insufficient permission in Telephony prior to SMR Aug-2024 Release 1 allows local attackers to configure default Message application...

tcdb.com Cross Site Scripting vulnerability OBB-3952757

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

BIT-2023-44487

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

AZL-35038 CVE-2023-44487 affecting package node-problem-detector for versions less than 0.8.10-16

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

AZL-35015 CVE-2023-44487 affecting package multus for versions less than 3.8-12

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

aug-goitservice.dyndns.org Cross Site Scripting vulnerability OBB-3697458

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...